Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
File:                     34352e3136372e31322e302f32322d3234203d3e20323635353334.roa (raw, json)
Hash identifier:          CoSYKas4sI8Qf+u+dneG3qLNre6vdVMb/a87M2bDQ+k=
Subject key identifier:   E0:B2:06:43:9F:C6:FB:1A:83:F5:66:9A:6B:E8:87:55:A2:04:54:67
Certificate issuer:       /CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
Certificate serial:       400B84D974CEF69E532C4539B51441D7280A2734
Authority key identifier: CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa
Signing time:             Tue 04 Feb 2025 18:03:49 +0000
ROA not before:           Tue 04 Feb 2025 17:58:49 +0000
ROA not after:            Tue 03 Feb 2026 18:03:49 +0000
asID:                     265534
IP address blocks:        45.167.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:0b:84:d9:74:ce:f6:9e:53:2c:45:39:b5:14:41:d7:28:0a:27:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD0CE589373B27C7377B95716717C42DB8B1FF08
        Validity
            Not Before: Feb  4 17:58:49 2025 GMT
            Not After : Feb  3 18:03:49 2026 GMT
        Subject: CN=E0B206439FC6FB1A83F5669A6BE88755A2045467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:ff:61:3d:cc:62:44:e8:af:a5:a7:42:99:
                    e9:a2:43:9c:55:02:94:f2:5f:6e:55:4d:ee:4c:11:
                    62:08:e7:7c:09:84:b9:70:fa:81:9b:e1:dc:fa:0c:
                    ec:3c:1e:30:d5:bc:4b:fc:79:fd:7e:c2:3a:81:84:
                    d2:c6:4d:f2:af:6f:86:7a:90:19:6e:74:01:e5:14:
                    82:49:78:fe:ee:6f:dd:0d:22:7d:35:40:2e:af:82:
                    ba:80:0f:59:0c:03:8c:10:8f:f0:46:05:56:9c:f1:
                    21:e4:59:4b:6c:57:bc:e7:d1:ae:dc:ab:12:28:b5:
                    69:c4:81:a2:70:b5:6a:6e:be:5c:07:10:12:4b:d7:
                    72:51:36:3e:1b:5e:3f:62:61:5e:36:ce:c4:25:d2:
                    cf:ec:83:64:78:f3:9e:f5:1e:8d:bb:15:8d:e7:7a:
                    1b:26:8e:3a:6d:89:30:8f:a7:ae:10:57:82:f5:bd:
                    1a:c5:a5:b3:cb:c3:f5:6d:b7:41:35:41:ab:1b:4f:
                    41:e7:3e:d2:12:b5:7b:ca:79:a7:54:17:1c:f3:7b:
                    98:41:3b:0b:e5:dc:c2:44:8e:99:2a:56:33:da:3f:
                    6f:58:44:db:7e:07:6d:cb:7f:f6:f2:32:e9:30:bc:
                    7b:84:cd:e6:52:5b:89:9c:84:f9:48:dd:23:1f:d6:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:06:43:9F:C6:FB:1A:83:F5:66:9A:6B:E8:87:55:A2:04:54:67
            X509v3 Authority Key Identifier:
                keyid:CD:0C:E5:89:37:3B:27:C7:37:7B:95:71:67:17:C4:2D:B8:B1:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CD0CE589373B27C7377B95716717C42DB8B1FF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C49F09D0777CD260B28DBBF1CA577BBF1A598B854F7D3DBA3A094E8B654051F2/0/34352e3136372e31322e302f32322d3234203d3e20323635353334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:cc:d7:a6:bd:36:d4:29:5e:5e:4a:61:e2:2e:5e:d2:e8:
         9f:b3:84:fb:64:15:b9:40:cc:d4:2f:af:67:1d:f2:d7:f2:a0:
         05:ad:4f:de:84:51:1c:da:14:c6:5e:d5:55:9b:aa:31:c5:4b:
         dd:17:d4:ed:57:0f:2a:28:d9:d1:26:e2:85:68:89:c2:31:26:
         6f:43:39:98:ce:f4:4a:f5:a5:93:c4:c3:be:bc:4a:32:d1:9e:
         34:b5:91:a7:31:41:3b:c7:a2:28:f8:65:8c:a4:ae:6f:01:79:
         53:bf:6a:83:e3:eb:68:a2:e8:5f:c6:a6:9e:91:d8:9c:ac:d2:
         f9:da:7a:77:36:39:dc:08:f1:d2:95:8d:f6:d9:fc:18:c0:02:
         0e:f7:06:55:6b:78:fe:f3:b3:81:e1:cc:8e:66:13:a6:0c:ea:
         f8:28:bf:2d:98:1b:f4:f0:14:47:1a:bc:f0:85:f0:27:05:96:
         85:61:da:66:0a:c4:68:17:f9:12:3d:e5:28:a6:c6:03:54:66:
         81:f4:47:51:b3:12:7f:be:05:e6:66:1f:c7:d2:5f:8c:ea:79:
         e5:00:b7:b8:98:1e:2c:e4:7f:32:91:12:e3:45:f1:90:a9:71:
         e3:69:66:0e:af:ff:e3:ba:d3:ba:07:79:8e:09:8a:50:fb:b3:
         eb:90:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:01:31 2025 by rpki-client